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BSA'S ARTIFICIAL INTELLIGENCE POLICY AGENDA 


Artificial intelligence (Al)-enabled software innovation is helping businesses in every 
sector of the economy leverage the value of data to drive digital transformation. From 
manufacturers that use Al to design more innovative and sustainable products to 
small businesses that rely on automated translation capabilities to grow their global 
customer base, Al is creating new opportunities to solve complex challenges. BSA 
members are at the forefront of the responsible development of Al, providing trusted 
software solutions that enable their enterprise customers to harness the power of 

Al to improve their product offerings and enhance their competitiveness. 


Tremendous advances in Al are quickly transforming expectations about how the 
technology may reshape the world. But unlocking the full potential of Al requires a 
dynamic and flexible policy framework that spurs responsible Al innovation. 


— FOCUSES ON FIVE KEY POLICY PILLARS: 
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Cybersecurity Research and Fostering a 
and Privacy Development Dynamic 
Protections Al Workforce 
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Building Confidence and Trust in Al Systems | \ i ARA 2? en 


Al is transforming how we live and work. But the success of Al podlics and services in the years to ~ e 


come will be based on public trust and confidence in the technologies that are driving today’s digital ~ 
economy. To earn that trust, organizations that develop and use Al must do so responsibly and in a | 
manner that accounts for the unique opportunities and risks the technology poses. Because Al plays — 
an increasingly important role in our daily lives, policymakers can enhance public confidence and trust 
by establishing a legal and regulatory environment that supports responsible innovation. - 








» Requiring Impact Assessments for High-Risk Al Systems. An impact assessment is an i 
accountability mechanism that promotes trust by demonstrating a system has been designed in 
a manner that accounts for potential risks it may pose to the public. By establishing a process for 
personnel to document key design choices and their underlying rationale, impact assessments 
enable organizations that develop or deploy high-risk Al to identify and mitigate risks that can 
emerge throughout a system's lifecycle. 





When Al is used in contexts that implicate civil rights or access to important life opportunities, 
the public should be assured that such systems have been thoroughly vetted by companies 
and will be continuously monitored to account for the risks associated with unintended bias. 
BSA recently published Confronting Bias: BSA’s Framework to Build Trust in Al to outline a 
comprehensive methodology for performing impact assessments to manage these risks. 





» Developing Risk Management Tools. Risk management frameworks and tools developed in 
collaboration with stakeholders across the Al ecosystem can help drive consensus around processes 
for identifying, measuring, mitigating, and communicating about Al risks. BSA strongly supports 
the National Institute of Standards and Technology's (NIST) ongoing effort to develop an Al Risk 
Management Framework that will enhance organizational Al governance. BSA also supports NIST 
efforts to develop standardized testing frameworks and benchmarks to evaluate the performance 
of Al systems across operational domains. 


» Ensuring Civil Rights Protections Are Fit for Purpose in the Digital Age. BSA supports the 
Administration's effort to develop an Al Bill of Rights. As digital technologies are increasingly 
used to make decisions that affect important aspects of daily life, from hiring to housing and 
lending, longstanding civil and consumer rights protections must remain robustly enforceable. To 
ensure legal protections are keeping pace with evolving technologies, agencies should conduct 
comprehensive reviews of existing protections and enforcement authorities to determine whether 
they need to be updated to address Al development or use or if resource constraints currently 
impede enforcement efforts. 


» 
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Pursuing Policy Interoperability. The global nature of today’s technology ecosystem demands 
coordinated policy responses. The US should work with key international partners to develop 

a shared vision for a risk-based regulatory approach for addressing common Al challenges and 
advancing norms around responsible Al governance. The US should likewise pursue a more clearly 
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defined federal approach to Al policy challenges to prevent t the emergence c ofa patchwork of o 
potentially conflicting state-level requirements \ \ \ ) ‘Son 


As the European Union moves towards enactment of the Al A = —the worl BSS 
comprehensive regulatory framework for high-risk Al—the impo ate f ao ini 
transatlantic policy interoperability will take on added significance. D sogha gous Baes 


policy approach centered on impact assessments for high-risk Al system can s 
helpful mechanism for spurring innovation and maintaining transatlantic interoperabil ae 


the global hub for Al development, the US should seize the opportunity to help shap o -R a 
norms by offering a thoughtful approach to Al policy. oo aaa 

















Sound Data Innovation Policies 





The exponential increase in data, combined with increases in remote computing power and 
development of more sophisticated algorithms, has fueled progress in machine learning and Al. 
Capitalizing on these developments to facilitate continued advances in Al requires sound data 
innovation policies. 


BSA SUPPORTS 


» Facilitating Global Data Flows. Data transfers are integral to every stage of the Al life cycle, from 
the development of predictive models to the deployment and use of Al systems. The data used 
in Al systems often originates from many geographically dispersed sources, making it imperative 
that data can move freely across borders. Rules that unnecessarily limit cross-border data transfers 
invariably limit the insights and other benefits that Al systems can provide. 


» Promoting Sensible Copyright Flexibilities. US copyright laws afford essential protections for 
creators while providing critical limitations and exceptions that facilitate innovative and emerging 
technologies. The US should encourage the international adoption of copyright exceptions to 
ensure that companies and researchers have the flexibility needed to engage in text and data 
mining, data analytics, and machine learning on any content to which they have lawful access. 


» Enhancing Open Government Data. To build on the success of the OPEN Government Data 
Act, Congress should establish a federal commission that would bring together experts from the 
government, industry, academic, and public interest communities to examine what government 
data assets would be most useful to the public and how the government itself can better use data 
and data technology. 


» Appointing a Federal Chief Data Officer. The Administration should appoint a federal Chief 
Data Officer (CDO) to oversee data governance across the federal government and ensure that 
data resources can be leveraged across departments. A federal CDO would provide a consistent 
approach to data governance that will maximize the strategic value of data resources. 
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Cybersecurity and Privacy Protections 


The data-intensive nature of Al makes cybersecurity and pay protections ital, Respandigloy AN NE 
innovation must be built on a solid foundation of data governance that prioritizes the security of —— in 
user data and aligns with the public's expectation about how their personal information will be used. — 
Consumers deserve transparency, clarity, and confidence in how their data is used and protected, and ~ 


consumer expectations should be backstopped by strong legal obligations on somipameg i t collect | = 
and/or process sensitive data. ie a 





BSA SUPPORTS i a oe 


» Enacting Comprehensive Privacy Legislation. Congress should pass comprehensive privacy 
legislation that establishes strong consumer rights in their data, imposes strong obligations on — 


companies that handle that data, and is backed by strong enforcement at the federal and state 
level. 


» Developing Risk-Based Cybersecurity Approaches. BSA's Framework for Software Security 
outlines a flexible, outcome-focused approach for managing the integrity of complex systems 
through best practices that are mapped to international standards. BSA’s position paper on 
Building a More Effective Strategy for ICT Supply Chain Security sets forth a holistic and 
sustainable set of policies for managing interconnected risks. 








» Leveraging the Security Benefits of Al. Organizations should leverage automation to improve 


cybersecurity by, for example, enabling cybersecurity experts to more effectively focus on high- 
value tasks. 


Research and Development 


Government research and development (R&D) creates a virtuous circle that spurs technological 
innovation that can drive long-term economic growth. US investments in R&D have been critical to 
the development of fundamental technologies, from the microprocessor to the internet, that have 
helped launch entire new industries and establish America as the hub for global innovation. Strategic 
investment in education, research, and technological development will be integral to maintaining US 
leadership in the development of Al technologies. 


BSA SUPPORTS 


» Growing Federal Investments in Al R&D. The US National Security Strategy recognizes that 
increased federal funding for R&D is essential to sparking innovation, growing high-paying 
jobs, ensuring economic competitiveness, and maintaining America’s historical scientific and 
technological edge. Congress and the Administration must work together to develop and fund a 
long-term federal Al R&D strategy to meet these objectives. 


» Resourcing NIST. As a research organization and lead US delegate for the development of 
international standards, NIST’s contribution to US technological competitiveness cannot be 
overstated. Funding for NIST must be prioritized and commensurate to its growing workload, 
including its efforts around Al risk management. 
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» Leveraging Public-Private Collaboration and University Pårtherships. Recent efforts to Aa 
shared resources for advanced Al research, such as the National Al Research Resource (NAIRR), À 
offer a path for leveraging the unique capabilities of the public, private, and academic sectors. By ~S Be 
providing Al researchers with access to computational resources and high-quality data, the NAIRR == 
has the potential to democratize and enhance America’s Al capabilities. The long-term success ~ 
of the NAIRR can be enhanced by encouraging and enabling research partnerships Pewee 
universities and the public and private sectors. i 





Fostering a Dynamic Workforce 





From retail to manufacturing, Al is supercharging the pace of digital transformation across industries. 
By making companies more dynamic and competitive, Al is helping to generate new jobs across _ 
industry sectors. The US must not only ensure it has the STEM talent needed to develop and drive 
these innovations, it must also prepare the broader workforce for a future in which virtually every job 
will involve an increased interaction with Al and other technologies. Both the government and the 
private sector have important roles to play in preparing the next generation to use Al tools for the jobs 
of the future and helping the current workforce transition successfully into the new job environment. 





BSA SUPPORTS 


» Enhanced Sharing of Real-Time Labor Data. A public-private partnership that improves the 
availability of real-time labor data would benefit the entire workforce ecosystem. Enhanced access 
to real-time labor data could provide employers and workers with better visibility into the skillsets 
that are most in-demand in their markets, allowing them to make informed choices about the 
types of reskilling efforts that will generate the most opportunity. Real-time labor data would also 
improve the efficacy of federal, state, and local employment strategies, program development, and 
resource allocation to address rapidly evolving workforce challenges. 


» Expanding Workforce Retraining and Alternative Pathways. Not all “Al jobs” will require coding 
or data science expertise. Industry and government should invest in programs to support the 
creation of alternative paths to Al careers that enable workers to develop high-demand technology 
skills without the need for a bachelor’s or graduate degree. Programs like apprenticeships, 
partnerships with community colleges, “boot camps,” and public service opportunities are all 
important gateways helping new and mid-career workers develop in-demand digital skills. 


» Improving Access and Support for STEM Education. Broadening opportunities, improving training 
programs, and expediting the development of a diverse workforce is needed to help people take 
advantage of the numerous opportunities available to and demand for skilled STEM workers. 


» Promoting Responsible Immigration Policy. Efforts to improve education and training 
opportunities for the US workforce will not entirely close the gap between available technology- 
related jobs and qualified workers. Policies that facilitate, not unduly restrict, access to foreign 
talent should be prioritized. 


www.bsa.org 


